Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
File:                     9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft (raw, json)
Hash identifier:          Y4W2BJWkm6t5IsG+OvZRlYd1eNxxFNtlloD+Fdb90cc=
Subject key identifier:   8A:5E:ED:13:F7:F1:18:4E:DA:F7:20:11:C9:19:B2:37:E5:45:5D:0F
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Certificate issuer:       /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial:       0198481BD90F42EEB8F4478EA942F7497976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
Manifest number:          1624
Signing time:             Sat 26 Jul 2025 19:00:41 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:41 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:41 +0000
Files and hashes:         1: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl (hash: DBn9Fsx1XCXA8ifVUpSZcz7ZKNOx/8tXuQiC5aWmrhg=)
                          2: GOVDOPz4Ey4aJOQYnZSfbM77b2Y.roa (hash: Tb323u5y8X/hUWvmAhaCMbIdIMzM33n+P05lv44LlyY=)
                          3: IzTlykprYa47CsY3y6FzjPAAIis.roa (hash: LStGQNgjfNAdb8m54IZ8WSpvULJzoLzTT0WYnkkBfps=)
                          4: MXaN9ynuTzCz5I3XeArng1Txuxc.roa (hash: Cdg3iBSuAVJDj2wnydmyG0jU78/z4Seqn38MNANYyjA=)
                          5: Y4GVnljDwyWTOfTGee3OzDonhig.roa (hash: ySFB8PlG1u+FbnjOQ2dXurRiUOKMmJGUoxmhKEyRUKg=)
                          6: eysMLCnP0aTsaOxEKY1PrTev3gM.roa (hash: hlV2/IUhDlwp241/nuu6G4gV6iGsUWBU0XsfTWbah/w=)
                          7: nSIzJKU0ViW0Tp1lo2ol2RD3RHM.roa (hash: BXbV5oAGjKarH2sbJPJGead6lXsDaCiXKANtgRRfQaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 19:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:d9:0f:42:ee:b8:f4:47:8e:a9:42:f7:49:79:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
        Validity
            Not Before: Jul 26 19:00:41 2025 GMT
            Not After : Jul 27 19:00:41 2025 GMT
        Subject: CN=8a5eed13f7f1184edaf72011c919b237e5455d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3b:51:52:40:d9:8b:8c:4a:15:c9:07:e1:a9:
                    98:0b:ed:bb:15:9c:a6:95:c0:5b:90:9d:50:5c:54:
                    0c:e9:f7:76:30:18:38:1a:ae:ed:ef:bf:d5:9a:e0:
                    78:12:1e:8f:ff:20:c3:8b:99:b9:5c:2f:8b:33:d9:
                    9a:d5:35:c6:d5:2a:c2:b6:fb:90:2b:db:ce:b5:72:
                    3e:cd:8c:54:15:02:47:2b:1b:56:31:1a:93:58:d8:
                    8a:ea:77:66:94:41:f4:bb:b7:37:3d:ea:34:37:17:
                    02:d0:6e:85:33:14:75:c2:cc:27:9e:de:89:4a:54:
                    b5:77:73:25:68:e4:25:e0:62:e9:97:6d:36:f1:1a:
                    8e:f3:b7:8d:e3:c0:50:34:1e:1a:ae:64:e6:97:ea:
                    a5:fd:94:58:41:e6:e3:e9:0c:b7:21:20:b8:cd:ab:
                    3f:c2:27:ab:21:1d:de:bd:c5:f6:18:37:e9:63:90:
                    a4:62:3c:7e:ef:67:ab:82:8f:24:4b:f8:1d:8c:b1:
                    08:43:92:f2:3c:f0:f2:bc:3b:09:71:bb:3e:6a:92:
                    ff:cb:d4:1b:89:7e:3a:65:98:b3:ad:a4:85:02:f8:
                    53:1c:1e:3b:66:a1:bc:e5:ec:dd:22:5d:be:42:9f:
                    ae:e3:cc:5f:03:81:ed:81:31:c0:b5:71:a6:3f:77:
                    ef:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5E:ED:13:F7:F1:18:4E:DA:F7:20:11:C9:19:B2:37:E5:45:5D:0F
            X509v3 Authority Key Identifier:
                keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a0:28:43:49:8d:66:67:cc:ea:aa:a2:1e:db:3e:2b:0a:ef:
         b3:d2:fd:67:8c:e8:fa:55:c8:c0:98:12:ac:f8:09:1e:83:77:
         73:a4:2a:ba:c5:68:6a:1c:13:38:42:ea:6d:b8:a1:f7:49:ee:
         c9:b8:16:2f:f2:0f:c8:52:05:aa:01:07:99:94:c4:57:2d:0b:
         05:a0:56:97:b2:95:cc:d3:28:84:a8:a2:ce:ab:6a:f4:ee:80:
         8b:dd:2f:fc:9f:f1:6b:82:ce:19:8f:9c:ba:c1:69:82:f6:84:
         04:76:e8:8c:36:66:26:3d:1f:e5:3a:15:cb:08:8e:bb:8e:fd:
         52:36:2c:65:7b:49:61:f1:ec:ae:52:25:17:83:23:78:08:a9:
         15:c4:5d:10:e8:7a:0c:e2:ff:03:6e:c7:93:03:fc:e4:30:6a:
         b0:3b:5f:b6:c9:5b:96:3e:d1:fa:8e:46:6c:d6:68:46:5f:94:
         dc:18:3f:a9:64:ac:f8:d6:02:c8:ed:2f:c3:21:a1:57:91:e0:
         a0:01:55:fe:a8:5b:0e:e4:74:49:68:b5:6a:e8:cc:65:4f:26:
         35:a5:13:3a:b2:00:3a:a4:a6:bd:28:95:6e:d7:df:a4:9d:5d:
         3f:fc:19:13:17:15:f5:7b:7e:c9:52:fc:a5:62:6f:a4:89:66:
         ba:81:50:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:07:38 2025 by rpki-client